payment vulnerability